[9959] in www-talk@info.cern.ch
Re: createing a mSQL database with a www cgi
daemon@ATHENA.MIT.EDU (Kee Hinckley)
Fri May 10 00:47:19 1996
In-Reply-To: <04FEA3192590D009*/c=us/admd=telemail/prmd=nasa/o=jpl/ou=ccmai
/s=Vincent/g=Jason/i=T/@MHS>
Date: Fri, 10 May 1996 00:07:26 -0400
To: "Jason T Vincent" <Jason.T.Vincent@jpl.nasa.gov>
From: nazgul@utopia.com (Kee Hinckley)
Cc: "www-talk@w3.org" <www-talk@w3.org> (Return requested)
Resent-From: www-talk@w3.org
At 4:43 PM -0400 5/9/96, Jason T Vincent wrote:
> Hey all,
>
> I can create a database in MSQL by running a perl cgi from the
> command line, but once I try to run the cgi through netscape it does
> not create the database. My guess is that it is not being created
> because the server thinks that user 'nobody' is trying to create the
> database. Is there a way to do this without creating a huge security
> hole?
I'd recommend running your server as somebody. Anytime you've got a server
that is going to be creating and/or modifying the system I think it's safer
to make it an actual user than make everything world-writable. It's
certainly far more manageable.
Kee Hinckley Utopia Inc. - Cyberspace Architects=81 617.768.5500
nazgul@utopia.com http://www.utopia.com/
I'm not sure which upsets me more: that people are so unwilling to accept
responsibility for their own actions, or that they are so eager to regulate
everyone else's.
